// 告訴瀏覽器，只允許 http://bb.aaa.com:9000 這個(gè)源請(qǐng)求服務(wù)器
$response->header('Access-Control-Allow-Origin', 'http://bb.aaa.com:9000');
// 告訴瀏覽器，請(qǐng)求頭里只允許有這些內(nèi)容
$response->header('Access-Control-Allow-Headers', 'Authorization, Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, X-Requested-By, If-Modified-Since, X-File-Name, X-File-Type, Cache-Control, Origin');
// 告訴瀏覽器，只允許暴露'Authorization, authenticated'這兩個(gè)字段
$response->header('Access-Control-Expose-Headers', 'Authorization, authenticated');
// 告訴瀏覽器，只允許GET, POST, PATCH, PUT, OPTIONS方法跨域請(qǐng)求
$response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS');
// 預(yù)檢
$response->header('Access-Control-Max-Age', 3600);

// /app/Http/Middleware/Cors.php
<?php
namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Response;
class Cors {

  /**
   * Handle an incoming request.
   *
   * @param \Illuminate\Http\Request $request
   * @param \Closure $next
   * @return mixed
   */
  public function handle($request, Closure $next)
  {
    $response = $next($request);
    // 告訴瀏覽器，只允許 http://bb.aaa.com:9000 這個(gè)源請(qǐng)求服務(wù)器
    $response->header('Access-Control-Allow-Origin', 'http://bb.aaa.com:9000');
    // 告訴瀏覽器，請(qǐng)求頭里只允許有這些內(nèi)容
    $response->header('Access-Control-Allow-Headers', 'Authorization, Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, X-Requested-By, If-Modified-Since, X-File-Name, X-File-Type, Cache-Control, Origin');
    // 告訴瀏覽器，只允許暴露'Authorization, authenticated'這兩個(gè)字段
    $response->header('Access-Control-Expose-Headers', 'Authorization, authenticated');
    // 告訴瀏覽器，只允許GET, POST, PATCH, PUT, OPTIONS方法跨域請(qǐng)求
    $response->header('Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, OPTIONS');
    // 預(yù)檢
    $response->header('Access-Control-Max-Age', 3600);
    return $response;
  }

}

$api->group(['middleware'=>'cors','prefix'=>'doc'], function ($api) {
  $api->get('userinfo', \App\Http\Controllers\Api\UsersController::class.'@show');
  
})

// manifest.json
"devServer" : {
  "port" : 9000,
  "disableHostCheck" : true,
  "proxy": {
    "/api/doc": {
      "target": "http://www.baidu.com",
      "changeOrigin": true,
      "secure": false
    },
    "/api2": {
     .....
    }
  },
  
},

uni.docajax = function (url, data = {}, method = "GET") {
 return new Promise((resolve, reject) => {
  var type = 'application/json'
  if (method == "GET") {
   if (data !== {}) {
    var arr = [];
    for (var key in data) {
     arr.push(`${key}=${data[key]}`);
    }
    url += `?${arr.join("&")}`;
   }
   type = 'application/x-www-form-urlencoded'
  }
  var access_token = uni.getStorageSync('access_token')
  console.log('token:',access_token)
  var baseUrl = '/api/doc/'
  uni.request({
   url: baseUrl + url,
   method: 'GET',
   data: data,
   header: {
    'content-type': type,
    'Accept':'application/x..v1+json',
    'Authorization':'Bearer '+access_token,
   },
   success: function (res) {
    if (res.data) {
     resolve(res.data)
    } else {
     console.log("請(qǐng)求失敗", res)
     reject(res)
    }
   },
   fail: function (res) {
    console.log("發(fā)起請(qǐng)求失敗~")
    console.log(res)
   }
  })
 })
}

//獲取用戶信息
uni.docajax("userinfo",{},'GET')
.then(res => {
  this.nickname = res.nickname
  this.avatar = res.avatar
});